Skip to content
We found cryptography bugs in the elliptic library using Wycheproof
blog.trailofbits.com | blog | #zero-day | #cryptography | #cve | #vulnerability-disclosure | #javascript | #elliptic | #signature-forgery | #wycheproof
Summary
Trail of Bits used Wycheproof to uncover two flaws in the elliptic JavaScript library, CVE-2024-48949 and CVE-2024-48948, enabling signature forgery or verification failure; one remains unpatched.
- Published
- Collected